Getting Data In

Can I run the universal forwarder with a 4.1x indexer?

sf_user_199
Path Finder

Can I run a 4.2 universal forwarder with a 4.1x indexer, and a 4.1x deployment server?

We are in the process of upgrading to 4.2, but it will take some time to do the entire tier, and I'd rather not have to install forwarders twice.

Our specific setup would be 4.2 universal forwarder > 4.1x forwarder > 4.1x indexers < 4.1x search head

All of these servers are controlled a separate 4.1x deployment server.

Tags (1)
1 Solution

Brian_Osburn
Builder

Yup, that should work.

When I upgraded to 4.2 from 4.1.x, I upgraded my forwarders to the UF and it worked fine.

Brian

View solution in original post

Brian_Osburn
Builder

Yup, that should work.

When I upgraded to 4.2 from 4.1.x, I upgraded my forwarders to the UF and it worked fine.

Brian

Get Updates on the Splunk Community!

Index This | What’s a riddle wrapped in an enigma?

September 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...